A vital component of your information security program is an information security officer that is independent.